Applicant : Larry T. HARADA et al. 

Serial No. : 09/323,415 

Filed : June 1, 1999 

Page : 12 of 13 



ke^^) 



Attorney's DocketTJo.: 06975-041001 / Security 01 



REMARKS 

Claims 1-50 are pending in the application, with claims 1,13, 22, 25, 28, 31, 33, and 38 
being independent. Claim 28 has been amended by this response to correct a typographical 
error. Claims 43-50 are added by this response. 

Applicant would like to thank the Examiner for the in-person interview conducted with 
the Applicant's representative, Kevin Greene, on January 15, 2004. Applicant also appreciates 
the Examiner's willingness to give the Applicant's representative a call to help expedite 
prosecution in the event that an updated search produces references that the Examiner believes 
may render the present claims non-allowable. 

During the interview, Applicant's representative and the Examiner discussed independent 
claims 1, 13, 22, 28, 31, 33, and 38 and the reasons that these claims are allowable over U.S. 
Patent No. 6,052,785 (Lin). In addition, the new dependent claims 43-50 were discussed. 

As agreed to in the interview, the independent claims are patentable over Lin at a 
minimum because of Lin's failure to describe or suggest creating an augmented data request by 
appending encrypted profile information to a data request as originally intercepted and sending 
the augmented data request to the target server, as recited in independent claims 1, 22, 28, 33, or 
38; receiving an augmented data request that includes encrypted user profile information 
appended to a data request as originally intercepted by a proxy server, as recited in independent 
claims 13 and 3 1 ; or receiving a data request comprising encrypted profile information appended 
to the data request as originally intercepted by a proxy server, as recited in independent claim 25. 

As discussed, Lin describes a multi -tiered system that includes clients 102-106, web 
server 108, and back-end data repositories 110-114 (e.g., a SQL database or distributed file 
system). In Lin, an encrypted HTTP request is sent by a client 102-106 to web server 108. The 
web server 108 then processes the received request. When processing of the request requires 
data from one or more of the back-end data repositories 110-114, web server 108 retrieves stored 
credentials and uses the credentials to access the appropriate back-end data repository 110-114 
(e.g., by issuing a SQL or file system command) to obtain the needed data. To access the 
appropriate back-end data repository 110-114, however, the web server 108 does not append the 
credentials to the received HTTP request to create an augmented HTTP request and then send the 
augmented HTTP request to the appropriate data repository 110-114. Rather, the web server 108 
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processes the received data request and issues a data request of suitable type (e.g., SQL 
command or file system command) to the appropriate data repository 1 10-1 14 to obtain data 
from that data repository 110-114. As such, the web server 108 does not append encrypted 
profile information to the data request as originally intercepted. 

As such, Applicant submits that all claims are allowable. Reconsideration and allowance 
of Applicant's claims are respectfully requested in light of the foregoing remarks. Enclosed is a 
$1 10.00 check for a One-Month Extension of time and a $144.00 check for excess claim fees. 
Please apply any other charges or credits to deposit account 06-1050. 

Respectfully submitted, 
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